Overview
Request 1031390 revoked
- update to 2.38.1 (bsc#1204455, CVE-2022-39253, bsc#1204456, CVE-2022-39260):
* CVE-2022-39253:
When relying on the `--local` clone optimization, Git dereferences
symbolic links in the source repository before creating hardlinks
(or copies) of the dereferenced link in the destination repository.
This can lead to surprising behavior where arbitrary files are
present in a repository's `$GIT_DIR` when cloning from a malicious
repository.
Git will no longer dereference symbolic links via the `--local`
clone mechanism, and will instead refuse to clone repositories that
have symbolic links present in the `$GIT_DIR/objects` directory.
Additionally, the value of `protocol.file.allow` is changed to be
"user" by default.
* CVE-2022-39260:
An overly-long command string given to `git shell` can result in
overflow in `split_cmdline()`, leading to arbitrary heap writes and
remote code execution when `git shell` is exposed and the directory
`$HOME/git-shell-commands` exists.
`git shell` is taught to refuse interactive commands that are
longer than 4MiB in size. `split_cmdline()` is hardened to reject
inputs larger than 2GiB.
- Created by dirkmueller
- In state revoked
Request History
dirkmueller created request
- update to 2.38.1 (bsc#1204455, CVE-2022-39253, bsc#1204456, CVE-2022-39260):
* CVE-2022-39253:
When relying on the `--local` clone optimization, Git dereferences
symbolic links in the source repository before creating hardlinks
(or copies) of the dereferenced link in the destination repository.
This can lead to surprising behavior where arbitrary files are
present in a repository's `$GIT_DIR` when cloning from a malicious
repository.
Git will no longer dereference symbolic links via the `--local`
clone mechanism, and will instead refuse to clone repositories that
have symbolic links present in the `$GIT_DIR/objects` directory.
Additionally, the value of `protocol.file.allow` is changed to be
"user" by default.
* CVE-2022-39260:
An overly-long command string given to `git shell` can result in
overflow in `split_cmdline()`, leading to arbitrary heap writes and
remote code execution when `git shell` is exposed and the directory
`$HOME/git-shell-commands` exists.
`git shell` is taught to refuse interactive commands that are
longer than 4MiB in size. `split_cmdline()` is hardened to reject
inputs larger than 2GiB.
factory-auto added opensuse-review-team as a reviewer
Please review sources
factory-auto accepted review
Check script succeeded
licensedigger accepted review
ok
dimstar_suse set openSUSE:Factory:Staging:H as a staging project
Being evaluated by staging project "openSUSE:Factory:Staging:H"
dimstar_suse accepted review
Picked "openSUSE:Factory:Staging:H"
dimstar accepted review
dimstar_suse added factory-staging as a reviewer
Being evaluated by group "factory-staging"
dimstar_suse accepted review
Unstaged from project "openSUSE:Factory:Staging:H"
dimstar_suse set openSUSE:Factory:Staging:L as a staging project
Being evaluated by staging project "openSUSE:Factory:Staging:L"
dimstar_suse accepted review
Picked "openSUSE:Factory:Staging:L"
dimstar_suse added factory-staging as a reviewer
Being evaluated by group "factory-staging"
dimstar_suse accepted review
Unstaged from project "openSUSE:Factory:Staging:L"
dimstar_suse declined review
sr#1032894 has newer source and is from the same project
dimstar_suse declined request
sr#1032894 has newer source and is from the same project
dirkmueller revoked request
breaks python-GitPython:
https://build.opensuse.org/package/live_build_log/openSUSE:Factory:Staging:L/python-GitPython/standard/i586
CC @aledr
[ 118s] if with_exceptions and status != 0: [ 118s] > raise GitCommandError(command, status, stderr_value, stdout_value) [ 118s] E git.exc.GitCommandError: Cmd('/usr/bin/git') failed due to: exit code(128) [ 118s] E cmdline: /usr/bin/git submodule add /home/abuild/rpmbuild/BUILD/GitPython-3.1.12.1610074031.f653af66/git/ext/gitdb/gitdb/ext/smmap module [ 118s] E stderr: 'Cloning into '/tmp/test_list_only_valid_submodulesrkwsfaod/parent/module'... [ 118s] E fatal: transport 'file' not allowed [ 118s] E fatal: clone of '/home/abuild/rpmbuild/BUILD/GitPython-3.1.12.1610074031.f653af66/git/ext/gitdb/gitdb/ext/smmap' into submodule path '/tmp/test_list_only_valid_submodulesrkwsfaod/parent/module' failed'it was eventually accepted anyway via some other path
python-GitPython had sr#1034394 to address that failure